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Claims 

1 . A method of delegating authority to control network resources, comprising: 

(a) providing parameters associated with network resources; and 

(b) creating at least one rule for delegating a scope of authority to create at least one 
5 policy-based rule for controlling access and usage of network resources, the at least one 

rule for delegating comprising at least one of the parameters and an identifier designating 
to whom the scope of authority is delegated, the at least one policy-based rule comprising 
at least one of the parameters. 

2. The method of claim 1 further comprising creating at least one other rule for delegating a 
10 separate scope of authority to create at least one additional rule for delegating another scope of 

authority to create at least one other policy-based rule for controlling access and usage of 
network resources, the at least one other rule for delegating and the at least one additional rule 
for delegating each comprising at least one of the parameters and an identifier designating to 
whom the scope of authority is delegated, the at least one other policy-based rule comprising at 
15 least one of the parameters. 

3. The method of claim 1 wherein the scope of authority in step (b) includes a scope of 
authority to delegate another scope of authority to create at least one other policy-based rule. 

4. The method of claim 1 wherein step (a) comprises providing priority as one of the 
parameters. 

20 5 . A method of controlling network performance, comprising: 

(a) providing parameters associated with network resources; 

(b) creating at least one rule for delegating a scope of authority to create at least one 
policy-based rule for controlling access and usage of network resources, the at least one 
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rule for delegating comprising at least one of the parameters and an identifier designating 
to whom the scope of authority is delegated, the at least one policy-based rule comprising 
at least one of the parameters; 

(c) determining if a created one of the policy-based rules is within the delegated 
scope of authority; and 

(d) modifying the created one of the policy-based rules if the created one of the 
policy-based rules is not within the delegated scope of authority such that the created one 
of the policy-based rules becomes within the delegated scope of authority. 

6. The method of claim 5 wherein step (d) comprises ignoring the created one of the policy- 
based rules not within the delegated scope of authority. 

7. The method of claim 5 wherein step (d) comprises ignoring a portion of the created one 
of the policy-based rules not within the delegated scope of authority. 

8. The method of claim 5 further comprising creating at least one other rule for delegating a 
separate scope of authority to create at least one additional rule for delegating another scope of 
authority to create at least one other policy-based rule for controlling access and usage of 
network resources, the at least one other rule for delegating and the at least one additional rule 
for delegating each comprising at least one of the parameters and an identifier designating to 
whom the scope of authority is delegated, the at least one other policy-based rule comprising at 
least one of the parameters. 

9. The method of claim 5 wherein the scope of authority in step (b) includes a scope of 
authority to delegate another scope of authority to create at least one other policy-based rule. 

10. The method of claim 5 wherein step (a) comprises providing priority as one of the 
parameters. 
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11. A system for controlling network performance, comprising: 

(a) a module for providing parameters associated with network resources; 

(b) a module for creating at least one rule for delegating a scope of authority to create 
at least one policy-based rule for controlling access and usage of network resources, the 
at least one rule for delegating comprising at least one of the parameters and an identifier 
designating to whom the scope of authority is delegated, the at least one policy-based rule 
comprising at least on of the parameters; 

(c) a module for determining if a created one of the policy-based rules is within the 
delegated scope of authority; and 

(d) a module for modifying the created one of the policy-based rules if the created 
one of the policy based rules is not within the delegated scope of authority such that the 
created one of the policy-based rules becomes within the delegated scope of authority. 

12. The system of claim 1 1 wherein the module for modifying the created one of the policy- 
based rules modifies the created one of the policy-based rules by ignoring the created one of the 
policy-based rules if the created one of the policy-based rules is not within the delegated scope of 
authority. 

13. The system of claim 1 1 wherein the module for modifying the created one of the policy- 
based rules modifies the created one of the policy-based rules by ignoring a portion of the 
created one of the policy-based rules not within the delegated scope of authority. 

14. The system of claim 1 1 further comprising a module for creating at least one other rule 
for delegating a separate scope of authority to create at least one additional rule for delegating 
another scope of authority to create at least one other policy-based rule for controlling access and 
usage of network resources, the at least one other rule for delegating and the at least one 
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additional rule for delegating each comprising at least one of the parameters and an identifier 
designating to whom the scope of authority is delegated, the at least one other policy-based rule 
comprising at least one of the parameters. 

15. The system of claim 1 1 wherein the scope of authority includes a scope of authority to 
5 delegate another scope of authority to create at least one other policy-based rule. 

16. The system of claim 1 1 wherein the parameters associated with network resources 
include at least priority. 
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